Secure the Web with an API-Driven Backend for Frontend